security

An Efficient Enterprise-class Container Engine

Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.

The Leading Security Assessment Framework for Android.

Linux Runtime Security and Forensics using eBPF

Knowledge Base 慢雾安全团队知识库

Fully featured, open source, privacy friendly email app for Android

Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage by writing context-aware access control policies for your application resources.

Популярные HTML / CSS / JavaScript / ECMAScript / TypeScript / React / Vue / Angular / Node вопросы на интервью и ответы на них (https://tinyurl.com/wxysrpsy)

🚗 A curated list of resources for learning about vehicle security and car hacking.

An OOB interaction gathering server and client library

CTF竞赛权威指南

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

Applied offensive security with Rust - https://kerkour.com/black-hat-rust

CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.

🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.

Hubble - Network, Service & Security Observability for Kubernetes using eBPF

SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

🐊 Policy Controller for Kubernetes

Mythril is a symbolic-execution-based securty analysis tool for EVM bytecode. It detects security vulnerabilities in smart contracts built for Ethereum and other EVM-compatible blockchains.

A collected list of awesome security talks

AI-safe .env files: Schemas for agents, Secrets for humans.

Tamper Dev is an extension that allows you to intercept and edit HTTP/HTTPS requests and responses as they happen without the need of a proxy. Works across all operating systems (including Chrome OS).

Knock Subdomain Scan

🛡 I2P: End-to-End encrypted and anonymous Internet

Valet lets you securely store data in the iOS, tvOS, watchOS, or macOS Keychain without knowing a thing about how the Keychain works. It’s easy. We promise.

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.

An experiment.

Advanced vm/sandbox for Node.js